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North  American  Jumelage  is  a  working  group  on  “Type  Systems",  which 
meets  once  a  year,  usually  in  the  fall.  The  meetings  are  conducted  in  an 
informal  setting,  in  a  focused  “working  group”  atmosphere.  The  schedule 
involves  a  combination  of  a  few  invited  one  hour  talks,  with  ample  time  for 
informal  discussions  and  presentations  of  work-in-progress,  similarly  to  the 
IFIP-style  working  groups.  The  focus  of  the  working  group  is  primarily  on 
the  theoretical  aspects  of  type  systems  stemming  from  typed  lambda  calculi, 
but  we  also  cover  wider  topics  ran^ng  from  mathematical  semantics  to  the 
software  design  issues  concerning  typed  programming  languages.  Previous 
meetings  were  held  at  Stanford  in  1990,  hosted  by  John  Mitchell,  and  at 
AT&T  Bell  Labs  in  1991,  hosted  by  Dave  MacQueen.  The  North  Ameri¬ 
can  working  group  was  originally  inspired  by  European  Jumelage  in  Typed 
Lambda  Calculus,  led  by  Jean-Yves  Girard  and  including  researchers  from 
a  number  of  E.C.  countries. 

The  general  coordinator  of  the  working  group  is  Andre  Scedrov  (Penn). 
Albert  Meyer  (MIT),  Rick  Statman  (CMU),  John  MitcheU  (Stanford),  and 
Anil  Nerode  (Cornell)  are  “regional  university  representatives”.  Philip  Scott 
(Ottawa)  is  the  representative  for  the  participation  of  Canadian  universities. 
The  group  also  has  “industrial  affiliates”:  Luca  Cardelli  (DEC  SRC)  and 
David  MacQueen  (AT&T  Bell  Labs). 

The  1992  meeting,  which  was  partially  supported  by  the  ONR  grant 
N00014-93- 1-0102,  was  hosted  by  Anil  Nerode  at  the  Mathematical  Sciences 
Institute,  Cornell  University,  Ithaca,  New  York,  on  October  15-17,  1992. 
The  meeting  included  50  participants.  The  program,  list  of  participants,  and 
the  abstracts  of  most  the  talks  are  included  in  this  report.  There  were  no 
published  proceedings.  During  the  1992  North  American  Jumelage  meeting 
it  was  decided  that  because  of  the  intensity  of  research  in  the  area  of  Linear 
Logic,  a  one-time  special  follow-up  workshop  on  that  topic  would  be  held  at 
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the  same  site  in  June  1993. 

Consequently,  a  Linear  Lope  Workshop  was  held  June  14-18, 1993  at  the 
Mathematical  Sciences  Institute,  Cornell  University,  Ithaca,  New  York.  The 
workshop,  also  partially  supported  by  the  ONR  grant  N00014-93-1-0102, 
was  attended  by  about  70  participants  from  the  U.S.,  Canada,  Europe,  and 
Japan.  The  program  committee  was  chaired  by  Andre  Scedrov  (Penn)  and 
included  S.  Abramsky  (Imperial,  London),  J.-Y.  Girard  (CNRS  Marseille), 
D.  Miller  (Penn),  and  J.  Mitchell  (Stanford).  The  program  and  the  list  of 
participants  are  included  below.  Proceedings  of  the  workshop,  edited  by 
J.-Y.  Girard,  will  be  published  as  a  hardcover  book. 
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NORTH  AMERICAN  JUMELAGE  '92 


1992  North  American  Jumelage  meeting  was  hosted  by  Anil  Nerode 
at  the  Mathematical  Sciences  Institute,  Cornell  University,  Ithaca, 

New  York,  on  Thursday-Saturday,  October  15-17, 

MEETING  SITE:  Mathematical  Sciences  Institute  (MSI) 

Room  214,  2nd  Floor 

409  College  Avenue,  Ithaca,  New  York  14850 

PROGRAM 

Wednesday,  October  14,  1992 

Informal  get  together  7-9  p.m.  at  MSI.  Light  refreshments  served. 
Thursday,  October  15,  1992 

9:00  -  9:10  Welcome 

9:10  -10:10  Invited  Lecture 

B.  Bloom  (Cornell) 

10:10  -10:30  Break 

10:30  -  1:00  Session  on  Proof  Theory 

Chair:  J.  Gallier  (Penn) 

1:00  -  2:30  Lunch 

2:30  -  3:40  Session  on  Formalizing  Algebra  in  Type  Theory  I 
Chair;  R.  Constable  (Cornell) 

3:40  -  4:10  Break 

4:10  -  5:20  Session  on  Formalizing  Algebra  in  Type  Theory  II 
Chair:  R.  Constedsle  (Cornell) 

7:00  -  9:00  Reception  at  MSI.  Hot  and  cold  appetizers  served. 

Friday,  October  16,  1992 

9:00  -10:00  Invited  Lecture 

J.  Mitchell  (Stanford) 

10:00  -10:30  Break 

10:30  -  1:00  Session  on  Programming  Language  Design 

Chairs:  C.  Gunter  (Penn)  and  R.  Harper  (Carnegie  Mellon) 

1:00  -  2:30  Lunch 

2:30  -  3:30  Invited  Lecture 

D.  Lei  vault  (Indieuia) 

3:30  -  4:00  Break 


4:00  -  6:00  Student  and  postdoc  presentations 


Saturday,  October  17.  1992 


9:30 

-10:30 

Invited  Lecture 

J.-L.  Krivine  (Paris  7) 

10:30 

-11:00 

Break 

11:00 

-12:00 

Invited  Lecttire 

M.  Felleisen  (Rice) 

12:00 

-  1:30 

Lunch 

1:30 

-2:50 

Session  on  Full  Abstraction  I 
Chair:  A.R.  Meyer  (MIT) 

2:50 

-  3:20 

Break 

3:20 

-  5:00 

Session  on  Full  Abstraction  II 
Chair:  A.R.  Meyer  (MIT) 

5:00 

MEETING  ENDS 

PARTICIPANTS 


Guy  Biel loch 
Bard  Bloom 
Val  Breazu-Tannen 
Stephen  Brookes 
Paul  Broome 
Kim  Bruce 
Jawahar  Chirimar 
Edmund  Clarke 
Robert  Constable 
Stavros  Cosmadakis 
Pierre  Cregut 
Matthias  Felleisen 
Amy  Felty 
Stacy  Finkelstein 
Peter  Freyd 
Jean  Gallier 
Philippa  Gardner 
Carl  Gunter 
Elsa  Gunter 
Robert  Harper 
Brian  Howard 
Doug  Howe 
Paul  Jackson 

Radhakrishneun  Jagadeesan 
Lalita  Jategaonkar 
Dexter  Kozen 
Jeeui-Louis  Krivine 
Deuiiel  Leiveuit 
Arthur  Lent 
Patrick  Lincoln 
James  Lipton 
Dave  MacQueen 
Albert  R.  Meyer 
John  Mitchell 
Philip  Mulry 
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Stephen . Brookes9BROOKES . PC . CS . CMU . EDU 

broome9brl  .mil 

kim0cs.williams.edu 

chirimar9saul . cis .upenn . edu 

emc9cs . emu . edu 

rc9cs . Cornell . edu 

stavros9watson . ibm.com 

cregut9research . att . com 

matthias0cs . rice . edu 

£elty9research.att.com 

stacy9saul . cis . upenn . edu 

p j  £9cis . upenn . edu 

j  ean0saul . cis . upeim . edu 

pag0saul.cis.upenn.edu 

gunter9saul.cis.upenn.edu 

elsa9research. att . com 

Robert_Harper0GOTTLOB . TIP . CS . CMU . EDU 

bhoward9saul . cis . upenn . edu 

howe0cs . Cornell . edu 

jackson9cs . cornell.edu 

r j  29doc . imperial .ac.uk 

lalita9theory . Ics .mit . edu 

kozen0cs .  comell .  edu 

kr ivine01ogique . jussieu . £r 
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a£lent0 theory . Ics .mit . edu 

1 incoln9 theory . stan£ord . edu 
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meyer9theory . Ics .mit . edu 
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Richard  Platek 
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Jon  Riecke 
Andre  Scedrov 
Philip  J.  Scott 
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Robert  Tennent 
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Stanley  Wainer 
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ABSTRACTS  OP  TALKS 


Towards  a  Metatheory  of  Structural  Operational  Semantics 

Bard  Bloom 

The  methods  of  classical  denotational  semantics  provide  a  number  of 
valuable  tools  to  designers  of  sequential  Algol-like  programming 
languages.  In  particular.  Algol-like  languages  can  be  described  by 
recxirsive  domain  equations  and  semantic  clauses.  It  is  rather 
difficult  to  solve  such  equations  from  first  principles  (Dana  Scott 
got  a  Turing  award  for  solving  the  first  one) .  Fortunately  for 
language  designers,  the  meta theory  of  denotational  senwuitics  shows 
that  every  set  of  recursive  domain  equations  has  a  solution.  Indeed, 
the  metatheory  is  so  powerful  that  progreuiming  lemguage  designers  can 
use  the  theory  naively  and  be  guaranteed  that  no  foundational  problems 
will  arise. 

However,  the  theory  that  has  been  so  successful  for  Algol-like 
languages  is  less  appropriate  for  concurrency.  The  approach  to 
lemguage  definition  that  seems  most  effective  so  far  is  structural 
operational  semantics  (SOS) .  To  date,  most  uses  of  SOS  for  lemguage 
definitions  have  been  ad-hoc.  We  sketch  the  outlines  of  a  metatheory 
of  SOSses  as  used  to  define  concurrent  languages,  and  in  particular 
the  discipline  of  process  algebras. 

The  first  concern  is  whether  or  not  a  set  of  SOS  rules  define  eui 
operational  semeuitics  at  all.  As  there  are  negative  rules  —  viz., 
rules  vdiich  state  that  one  process  ceui  act  if  another  cannot  —  it  is 
not  clear  that  there  are  any  sound  transition  relations.  Nonetheless, 
for  the  class  of  6S0S  rules  (BIM88] ,  we  show  that  there  always  is  a 
unique  8uid  satisfactory  operational  semantics.  Thus  language 
designers  ceui  use  GSOS  rules  naively  and  be  guaranteed  that  their 
language  makes  basic  sense. 

Indeed,  a  good  deal  more  holds.  Two  of  the  three  main  schools  of 
process  algebras  are  based  on  the  notion  of  bisiroulation;  we  show  that 
any  GSOS  leuiguage  respects  bisimulation  (technically,  bisimulation 
semantics  are  compositional) ,  and  the  very  successful  proof  methods 
using  bi simulation  apply  to  them. 

Furthermore,  it  is  often  possible  to  give  a  more  accurate  semeuitics. 
That  is,  bisimulation  is  eui  extremely  fine  semeuitics;  it  makes  roemy 
distinctions  between  processes.  Coarser  semeuitics,  when  they  are 
adequate,  allow  more  powerful  reasoning  principles:  e.g.,  there  are 
cosqpiler  optimizations  allowed  by,  say,  failures  semantics  which 


violate  bisimulation  semantics.  These  optimizations  can  be  applied 
only  if  failures  senuuitics  are  adequate.  We  present  a  collection  of 
theorons  showing  \idien  most  of  the  common  coarser  semantics  are 
adequate.  That  is,  a  language  designer  may  singly  look  at  the  rules 
for  the  lauiguage  and  tell  that,  say.  the  ready  trace  model  is  adequate 
and  no  coarser  model  is  likely  to  be. 

Finally,  we  give  methods  building  logics  for  verifying  progreuns.  From 
a  GSOS  specification,  we  show  how  to  derive  a  complete  equational 
axiom  system  with  one  infinitary  axiom  (viz.  an  induction  principle) . 
The  axioms  our  algorithm  produces  are  coirpared>le  to  those  devised  by 
researchers,  and  in  a  few  cases  actually  superior. 


On  the  Proof  Theory  of  Kruskal ' s  Theorem 
Michael  RATHJEN 

Kruskal 's  theorem  (for  short,  KT)  asserts  that  the  finite  trees  are 
well — quasi  ordered  under  embeddability .  This  theorem  is  the  main  tool 
for  showing  that  certain  sets  of  rewrite  rules  are  terminating. 

The  usual  proof  of  KT  utilizes  an  impredicative  $\Pi''l_l$ 

conprehension.  Friedman  showed  that  KT  is  not  provcdjle  in  predicative  systems 
in  that  he  devised  an  order  homomorphism  from  the  set  of  finite  trees  onto 
a  system  of  ordinal  notations  for  the  ordinal  $\Gamma_0$.  Friedman's 
construction  can  be  carried  out  for  stronger  notation  systems.  In  this  talk 
I  will  present  the  strongest  ordinal  notation  system  for  which  this  can 
be  done.  This  leads  to  a  calibration  of  the  proof — theoretic  strength  of  KT, 
thereby  giving,  in  some  sense,  the  most  constructive  proof  of  KT.  \\ 

This  is  joint  work  with  A.  Weiermann. 


Abstract  ;  "Ordinal  Complexity  of  Recursive  Definitions" 

Stan  Wainer  (Visiting  CMU  from  Leeds  UK) . 

The  methods  of  Proof  Theory  and  Subrecursive  Hierarchies  are  used  to 
measure  and  conpare  the  complexities  of  various  kinds  of  recursive 
definition  (and  their  modes  of  evaluation) ,  according  to  the  sizes  of 
their  termination  orderings.  This  is  an  old-established  theme  in 
Mathematical  Logic  (in  fact  a  theorem  of  Tait  1961  reappears  here  in  a 
generalized  form) ,  but  newer  results  have  emerged  only  recently. 

The  objective  is  to  compute  the  ordinal  trade-off  \alpha  to  \beta  to 
\gamma  such  that  arbitrarily  nested  (call  by  value)  recursive 
definitions  over  wellorderings  \alpha  can  be 

(1)  transformed  into  while -programs  (tail  recursions)  over  wellorderings  \beta, 
and  (2)  evaluated  by  rewriting  over  termination  orderings  \gcunma. 

Each  such  trade-off  corresponds  clearly  to  a  form  of  Cut-Elimination  and 
we  have 

(1)  \beta  =  exp(\alpha)  corresponding  to  Gentzen  Cut-Reduction,  and 

(2)  \gamma  =  counteJsle  collapse  of  \alpha  +,  corresponding  to  'complete  cut- 
elimination'  a  la  Girard. 


A  Typed  Pattern  Calculus 

Val  Breazu-Teumen,  University  of  Pennsylvania 
ABSTRACT 

Programming  with  pattern-matching  function  definitions  is  a  very 
attractive  feature  that  accounts  for  much  of  the  popularity  of 
functional  lemguages  such  as  Hope,  ML,  Miranda,  and  Haskell.  It  is  a 


pity  therefore  that  our  current  understanding  of  such  programs  is 
largely  operational,  and  that  no  more  of  their  structure  than  that 
explained  by  first-order  rewrite  systems  has  been  analyzed.  This 
situation  would  be  clumged  if  we  could  understand  pattern  constructs 
as  well  as  we  now  understand  Algol-like  and  functional  programming 
constructs.  A  crucial  role  in  understanding  these  latter  constructs 
has  been  played  by  the  lambda  calculus  and  its  various  type 
disciplines.  We  present  a  corresponding  ''calculus''  that  models 
programs  with  pattern-matching. 

To  see  how  this  pattern  calculus  comes  about,  recall  the 
propositions-as-types/programs-as-proofs  analogy,  an  extremely 
fruitful  idea  that  originated  with  Curry  and  Howard.  They  have  shown 
that  there  exists  eui  ''isomorphism''  between  the  terms  of  typed  lambda 
calculus  and  the  natural  deduction  proofs  of  intuitionistic  logic.  The 
constructor  terms  of  fxinctional  programming  correspond  to  those  proofs 
built  using  the  introduction  rule  of  natural  deduction.  Now,  patterns 
may  look  like  constructor  terms,  but  operationally  they  are  dual  to 
them.  There  is  one  formulation  of  logical  proof  systems  in  \idiich  this 
duality  is  made  clear,  and  this  is  Gentzen's  sequent  proof  system. 

Our  calculus  arises  as  a  conputational  interpretation  of  these  proofs, 
the  sequent  system  has  right  rules,  which  are  the  seune  as  the  introduction 
rules  of  natural  deduction,  left  rules,  which  we  use  to  build 
patterns,  and  the  cut  rule,  which  is  interpreted  as  a  {\em  let) 
construct  amd  where  computations  originate  .  The  left  contraction  amd 
left  weakening  rules  correspond  to  the  layered  amd  wildcard  patterns 
in  ML  or  Haskell.  In  this  calculus  however,  as  oposed  to  practical 
languages,  we  can  build  patterns  of  arbitrary  depth. 

While  passing  some  basic  sanity  tests  such  as  decidability  of 
typechecking,  uniqueness  of  types,  subject  reduction,  amd  termination 
of  recursion-free  programs,  this  formalism  has  a  lot  of  aspects  to  be 
discovered,  such  as  interpretations  in  ccc's,  general  reduction 
systems,  amd  extensions  dealing  with  a  new  class  of  ' 'deep  primitive 
rec\xrsive' '  algorithms  that  the  usual  typed  lambda  calculi  do  not 
directly  express. 

Joint  work  with  Delia  Keener  and  Laurence  Fuel,  INRIA  and  Paris  XI. 


Strong  normalization  for  the  theory  of  constructions: 
a  Kripke-like  interpretation 

Jean  Gallier 

Abstract:  A  new  proof  of  strong  normalization  for  the  theory 
of  constructions  (under  $\beta$-conversion)  is  presented. 

Previous  proofs  are  either  incorrect  (including  Coquamd's  proof 
of  normalization  given  in  his  thesis)  or  use  infinite  contexts, 
except  for  the  proof  given  by  Geuvers  amd  Nederhof  (1991) . 

In  this  last  proof,  strong  normalization  in 

the  theory  of  constructions  is  reduced  to  strong  normalization 
in  Girard's  system  $F_{ \omega)$,  via  a  fairly  long  amd  coitqplex 
argiiment . 

The  proof  sketched  here  (in  joint  work  with  Coquamd)  is  more  direct, 
does  not  use  infinite  contexts,  amd  uses 
a  kind  of  {\it  Kripke  interpretationX/)  which  suggests 
a  possible  relationship  to  the  Mitchell-Moggi  Kripke  models 
of  the  simply-typed  lambda  calculus. 


Carl  Gunter: 


We  describe  the  aUDStract  syntax  and  the  operational  semantics  of  a 
higher-order  functional  programming  langauge.  The  language,  which  we 
call  {\it  RAVL}  for  {\it  R}ecords  {\it  A}nd  {\it  V}ariants  {\it 
Danguage,  has  a  polymorphic  type  system  that  supports  flexible 
programming  with  records  and  vari^mts.  We  prove  that  the  type  system 
for  RAVL  insures  the  absence  of  certain  runtime  type  errors  (such  as 
selecting  a  field  from  a  record  where  that  field  is  missing) .  Our 
analysis  includes  a  case  study,  using  RAVL,  of  the  nature  of  such 
proofs  for  languages  with  eua  operational  semantics  given  using  proof 
rules  in  the  form  sometimes  known  as  'natural'  semantics. 


David  MacQueen: 

Title:  Higher-order  functors  in  Standard  ML 
Abstract : 

The  Standard  ML  module  system  is  application  of  type  theory  to  the 
problem  of  structuring  large  programs  and  providing  more  flexible  and 
powerful  abstraction  mechanisms  for  programming.  Until  now,  the 
module  system  has  been  “first-order*,  in  the  sense  that  one  could 
abstract  over  simple  modules  (called  “structures*  in  Standard  ML)  to 
form  parametric  modules  called  “functors*,  but  one  could  not  abstract 
over  fxmctors  to  form  higher-order  fvinctors. 

In  practice  this  higher-order  abstraction  is  a  natural  and  useful 
extension  of  the  current  Standard  ML  module  system.  We  have  developed 
a  semantics  for  higher-order  functors  as  an  extension  of  the  natural 
semantics  formulation  used  in  the  Definition  of  Standard  ML,  and  we 
have  iitplemented  higher-order  functors  in  the  Standard  ML  of  New 
Jersey  compiler.  Both  the  semantics  and  inplementation  involve 
fundcunentally  new  ideas  and  mechanisms  to  deal  with  the  problem  of 
propagation  of  sharing  or  identity  information.  Key  issues  are 
the  contravariant  behavior  of  functor  signature  matching  and  the 
dual  elaboration  of  functor  applications  involving  formal  fxmctor 
parameters,  once  at  the  point  of  functor  definition  and  again  at 
the  point  of  fxinctor  application.  A  sketch  of  the  definition  of 
functor  application  is  presented. 

This  is  joint  work  with  Pierre  Cregut  and  Mads  Tofte. 


Blelloch: 


Nesl:  A  Nested  Data-Parallel  Leuiguage 

Guy  E.  Blelloch 
Carnegie  Mellon  University 

In  this  talk  I  will  descrilse  NESL,  a  strongly- typed,  data-parallel 
language.  NESL  is  intended  to  be  used  as  a  portable  interface  for 
programming  a  variety  of  parallel  and  vector  supercomputers,  and  was 
designed  to  be  particularly  useful  for  problems  with  irregular  and 
dynamic  data-structures .  NESL  currently  r\ms  on  the  CM-2  and  the  Cray 
y-MP.  It  generates  fully  parallel  code  and,  for  many  algorithms,  the 
current  implementation  achieves  performance  close  to  optimized 
machine- specific  code.  The  leuiguage  is  based  on  a  small  set  of 


extensions  to  a  first-order  fiuictional  language.  This  talk  will 
describe  the  data-parallel  extensions  and  show  several  exanqples  of 
code.  It  will  also  discuss  how  the  parallel  complexity  in  the 
Parallel  Random  Access  Machine  model  can  be  derived  from  the  code. 


Classical  logic  and  storage  operators 
Jean-Louis  Krivine 

An  extension  of  second  order  lambda -cal cuius  is  considered,  in  which 
the  xinderlying  logic  is  no  longer  intuitionistic  logic  as  in  system  F, 
but  classical  logic. 

The  pure  lambda-calculus  is  then  extended  with  a  new  constant  C.  The 
rule  of  head  reduction  of  C  is  a  particular  case  of  a  rule  given 
by  M.  Felleisen  for  control  operators. 

It  is  then  proved,  by  using  the  notion  of  "storage  operator",  that 
computation  of  data  types  is  correctly  handled  in  this  freune. 


SPCF:  Its  Model,  Calculus,  and  Computational  Power 
Matthias  Felleisen 


This  is  joint  work  with  Ramarao  Kanneganti  and  Robert  Cartwright. 

SPCF,  a  sequential  extension  of  Plotkin's  PCF,  is  an  idealized 
sequential  programming  language  that  permits  programmers  and  programs 
to  observe  the  evaluation  order  of  procedures,  in  this  paper,  we 
construct  a  fully  abstract  model  of  SPCF  using  a  new  mathematical 
framework  suitable  for  defining  fully  abstract  models  of  sequential 
fiuictional  languages.  Then,  we  develop  an  extended  typed  \lcal\  to 
specify  the  operational  semantics  of  SPCF  and  show  that  the  calculus 
is  complete  for  the  consteint-free  sub-language.  Finally,  we  prove 
that  SPCF  is  {\it  computationally  conqplete),  that  is,  it  cam  express 
all  conputable  (recursively  enumerable)  elements  in  its  fully  abstract 
model . 

The  paper  that  started  this  research  direction  is  a  POPL'92  paper 
"Observable  Sequentiality  and  Full  Abstraction"  by  Robert  Cartwright 
and  Matthias  Felleisen.  One  of  the  major  challenges  in  denotational 
semauitics  is  the  construction  of  fully  abstract  models  for  {\it  sequential} 
programming  languages.  For  the  past  fifteen  years,  research  on  this 
problem  has  focused  on  developing  models  for  PCF,  an  idealized  fiuictional 
programming  lemguage  based  on  the  typed  lambda  calculus.  Unlike  most 
practical  languages,  PCF  has  no  facilities  for  {\it  observingN/}  and 
{\it  exploiting\/}  the  evaluation  order  of  arguments  in  procedures. 

Since  we  believe  that  such  facilities  are  crucial  for  under stcuiding 

the  nature  of  sequential  conputation,  this  paper  focuses  on  a 

sequential  extension  of  PCF  (called  SPCF)  that  includes  two  classes  of 

control  operators:  error  generators  and  escape  handlers.  These  new 

control  operators  enable  us  to  construct  a  fully  abstract  model  for 

SPCF  that  interprets  higher  types  as  sets  of  {\it  error-sensitive}  functions 

instead  of  {\it  continuous}  functions.  The  error-sensitive  functions  form  a 


Scott  domain  that  is  isomorphic  to  a  domain  of  decision  trees.  We 
believe  that  the  same  construction  will  yield  fully  abstract  models 
for  functional  languages  with  different  control  operators  for 
observing  the  order  of  evaluation. 

Rice  University  progreunming  language  papers  are  available  from 
titan.cs.rice.edu  via  anonymous  ftp  in  public/ languages.  The  file 
README  lists  vAxat  is  available. 


Fully  Abstract  Semantics  for  Parallel  Programs 
Stephen  BROOKES 
Carnegie  Mellon  University 
School  of  Computer  Science 


ABSTRACT 

This  talk  focuses  on  the  behavior  of  programs  in  a  standard 
shared  varied>le  inqperative  parallel  programming  language.  The 
classical  semantics,  due  to  Hennessy  and  Plotkin,  uses  a 
recursively  defined  domain  of  ' 'resumptions' '  and  fails  to 
validate  certain  natural  program  equivalences.  Moreover,  the 
resiinptions  semantics  cannot  give  a  proper  account  of  the 
behavior  of  program  xinder  fairness  or  finite-delay  assxmnptions .  I 
introduce  a  new  semantics  with  several  attractive  features:  it 
has  cm  intuitively  clean  and  simple  structure,  is  fully  abstract 
with  respect  to  partial  correctness  behavior,  it  can  be  adapted 
to  cope  with  deadlock  and  with  total  correctness,  and  it  models 
fair  execution  adequately.  The  semantics  can  also  be  varied  to 
allow  for  different  levels  of  atomicity.  Each  of  the  semantics  is 
fully  abstract  with  respect  to  the  relevant  notion  of  program 
behavior:  two  phrases  have  the  same  meaning  if  and  only  if  they 
are  interchsmgeable  in  all  program  contexts  without  affecting  the 
behavior  of  the  overall  program.  As  a  conseq[uence,  these  semantic 
models  support  compositional  (or  modular)  reasoning  about  partial 
and  total  correctness  and  about  deadlock-freedom  of  parallel 
programs,  with  or  without  fairness  assumptions. 


On  completeness  for  typed  lambda  calculus  with  bottom 

Stavros  COSMADAKIS 
IBM  T.J.  Watson  Research  Center 

Full  abstraction  results  can  be  viewed  as  a  tool  to  develop 
reasoning  principles  for  observational  equivalence  of  program 
phrases;  instead  of  reasoning  cibout  observational  equivalence, 
one  reasons  about  equality  in  a  semantic  model.  Thus,  since 
beta-eta  is  complete  for  the  full  continuous  model,  it  is 
complete  for  proving  observational  equivalence  of  pure  terms  in 
PCF  with  parallel  conditional. 

I  will  present  some  ongoing  research  towards  developing  a 
conplete  proof  system  for  typed  lambda  terms  with  a  constant 
denoting  bottom.  I  will  also  mention  some  related  (Questions  about 
sequential  PCF. 


Testing  Equivalence  for  Petri  Nets  and  CCS  with  Action  Refinement 

and  Self-Synchronization 
Lalita  JATEGAOMKAR 
MIT  Leiboratory  for  Computer  Science 


We  introduce  a  unary  "self-synchronization*  operation  on  concurrent 


processes  analogous  to  the  binary  operations  of 

parallel-con®>osition-with-synchronization  found  in  CCS,  TCSP  and  Process 
Algebra.  The  idea  is  that  the  self-synchronization  on  actions  a,  b  and  c 
of  process  P  is  a  new  process  Q  vrtaich  acts  like  P,  except  that  whenever  P 
has  a  pair  of  concurrent  transitions  with  labels  a  and  b,  then  Q  has  an 
additional  transition,  labelled  c.  leading  to  the  same  state  reachable  by 
firing  the  a  and  b  transitions. 

Self-synchronization  can  enable  sequential  observers  to  detect  a  degree  of 
concurrency:  the  self-synchronization  on  a-b-c  of  (a|b)  has  "c"  as  a 
visible  trace,  while  the  self-synchronization  of  (edj  +  ba)  still  fails  on 
c.  Standard  trace  and  failure  semantics  equate  a|b  and  ab-»-ba,  and  so  are 
not  con^ositional  for  self-synchronization.  We  show  that  a  simple 
modification  replacing  actions  by  “steps*,  namely  multisets  of  concurrent 
actions,  yields  semantics  which  are  con^jositional  for  self-synchronization 
and  all  the  usual  CCS/TCSP  operators.  The  resulting  “step-trace*  euid 
“step- failure"  semantics  are  in  fact  fully  abstract  for  Testing 
Equivalence  with  respect  to  self-synchronization. 

The  same  idea  of  replacing  actions  by  steps  carries  over  to  a  more  fully 
concurrent  pomset -failure  semeuitics  we  developed  previously.  The  new 
version  of  pomset -STEP- failures  is  fully  abstract  for  Testing  Equivalence 
with  respect  to  the  operations  of  action-refinement  and 
self-synchronization  on  a  safe  Petri  Net  model  of  processes. 

As  an  application  of  self-synchronization,  we  show  how  action-refinement 
in  which  communication  occurs  between  refining  processes  can  be  expressed 
using  self-synchronization  and  ordinary,  noncommunicating  refinement. 
Hennessy  has  suggested  that  such  action-refinement -with-communication  may 
be  more  useful  them  the  noncommunicating  version.  Our  results  show  that 
pomset-step-failure  semantics  is  fully  abstract  for  a  simpler  and  more 
general  action-refinement-with-conammication  operation  than  that 
considered  by  Hennessy. 

This  is  joint  work  with  Albert  Meyer. 


Relational  Parametricity  and  Local  Variables 
P.W.  O'HEARN  and  R.D.  Tennent 

J.  C.  Reynolds  has  argued  that  Strachey's  intuitive 
concept  of  • ‘parametric ' '  (i.e.,  uniform)  polymorphism 
is  closely  linked  to  {\em  representation  independenceX/} , 
and  used  logical  relations  to  formalize  this  principle  in 
languages  with  type  variables  and  user-defined  types. 

Here,  we  use  relational  parametricity  to  address  long-standing 

problems  with  the  semantics  of  local-varieU^le  declarations, 

by  showing  that  interactions  between  local  and  non-local  entities 

obey  certain  relational  criteria.  The  talk  will  begin  with  an  overview 

of  problematic  aspects  of  local -variedjle  semantics, 

then  proceed  to  an  explamation  of  how  parametricity  is  relevant, 

cmd  conclude  by  mentioning  still  unresolved  problems. 


The  Logic  of  Block  Structure 
Arthur  Lent 

Massachusetts  Institute  of  Technology 
LedDoratory  for  Computer  Science 

In  the  early  1980s  Reynolds  defined  Specification  Logic,  a  partial 
correctness  logic  for  an  ALGOL-like  language  (characterized  by  having 
block-structured  local  variables  and  higher  order  procedures) .  As  a 
classical  theory,  Specifi::;ation  Logic  turned  out  to  be  inconsistent. 
Nevertheless,  Tennent,  using  a  form  of  possible-world  semantics  originally 
tailored  to  ALGOL-like  Icmguages  by  Reynolds  and  Oles,  developed  a 
semantic  interpretation  of  Specification  Logic  which  demonstrated  its 


consistency  as  an  intuitionistic  theory. 

'  Consistency  is  of  course  a  minimal  condition  on  a  logic:  there  remains  the 
question  of  soundness.  Related  to  soundness,  and  of  independent 
significance,  is  the  question  vdiether  these  possible-world  sememtics  are 
adequate — in  a  technical  sense — for  the  standard  operational  semantics  of 
an  ALGOL-like  leuiguage.  For  exairple,  it  was  unknown  whether  a  divergent 
term  could  have  the  Scune  meaning  as  a  convergent  term  in  these  models. 

This  talk  will  present  a  set  of  sufficient  conditions  for  adequacy  of 
possible-world  models  of  ALGOL-like  languages.  The  fact  that  a  fragment 
of  a  model  of  Specification  Logic  is  adequate  has  certain  ramifications 
for  the  truth  of  formulas  of  Specification  Logic.  We  will  explore  these 
raitdfications  auid  give  an  operational  interpretation  to  a  fragment  of 
Specification  Logic. 


Pull  Abstraction  as  a  Guide  in  Designing  Language  Features 

Jon  G.  RIECKE 
AT&T  Bell  Laboratories 

The  theoretical  notion  of  full  abstraction  has  (yet  unfulfilled) 
potential  as  a  tool  in  code  verification,  but  it  has  also 
unexpected  uses  in  the  design  of  programming  languages.  Here  we 
use  full  abstraction  as  a  guide  in  designing  aui  extension  of 
call-by-value  PCF+callcc  with  control  delimiters.  We  first 
describe  cps  conversion  for  call-by-value  PCF;  show  how  the 
conversion  does  not  preserve  observational  congruence,  i.e.,  is 
not  fully  abstract;  eind  show  how  it  may  be  cheuiged  into  a  fully 
abstract  translation  using  definedsle  retractions.  The  retractions 
in  the  cps  world  lead  to  a  notion  of  typed  control  delimiters, 
denoted  by  #,  in  the  untranslated  world.  The  control  delimiters 
have  one  interesting  property; 

Theorem:  If  M  and  N  are  closed  PCF  terms  and  M  emd  N  are 
observationally  congruent  in  call-by-value  PCF  WITHOUT  callcc, 
then  #M  and  #N  are  observationally  congruent  in  call-by-value 
PCF+callcc. 

We  give  a  small  example  showing  why  this  theorem  DOES  NOT  hold 
without  #.  In  words,  the  theorem  shows  that  #  declares  portions 
of  a  program  to  be  "continuation-free",  and  forces  those  portions 
to  pass  continuations  in  tightly-controlled  ways.  We  conclude 
with  a  discussion  of  the  philosophical  implications  of  having  #  in 
call-by-value  PCF+callcc. 
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